Files
python-keystoneclient/keystoneclient/v3/projects.py
Thiago Paiva Brito 8da68e3ded Hierarchical multitenancy basic calls
This patch addresses changes needed to manage projects through
keystoneclient API v3. The changes are:

create:
  new param 'parent': set the parent project of the project being created

get:
  new param 'subtree_as_list': If True, shows projects down the hierarchy
  new param 'parents_as_list': If True, shows projects up the hierarchy

Co-Authored-By: Andre Aranha <afaranha@lsd.ufcg.edu.br>
Co-Authored-By: Rodrigo Duarte <rodrigods@lsd.ufcg.edu.br>

Change-Id: I0f02a66e6a29584197ed00cb32caecb50956f458
Implements: blueprint hierarchical-multitenancy
2015-02-05 22:36:47 -03:00

144 lines
5.4 KiB
Python

# Copyright 2011 OpenStack Foundation
# Copyright 2011 Nebula, Inc.
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
from keystoneclient import base
from keystoneclient import utils
class Project(base.Resource):
"""Represents an Identity project.
Attributes:
* id: a uuid that identifies the project
* name: project name
* description: project description
* enabled: boolean to indicate if project is enabled
* parent_id: a uuid representing this project's parent in hierarchy
* parents: a list or a structured dict containing the parents of this
project in the hierarchy
* subtree: a list or a structured dict containing the subtree of this
project in the hierarchy
"""
@utils.positional(enforcement=utils.positional.WARN)
def update(self, name=None, description=None, enabled=None):
kwargs = {
'name': name if name is not None else self.name,
'description': (description
if description is not None
else self.description),
'enabled': enabled if enabled is not None else self.enabled,
}
try:
retval = self.manager.update(self.id, **kwargs)
self = retval
except Exception:
retval = None
return retval
class ProjectManager(base.CrudManager):
"""Manager class for manipulating Identity projects."""
resource_class = Project
collection_key = 'projects'
key = 'project'
@utils.positional(1, enforcement=utils.positional.WARN)
def create(self, name, domain, description=None,
enabled=True, parent=None, **kwargs):
"""Create a project.
:param str name: project name.
:param domain: the project domain.
:type domain: :py:class:`keystoneclient.v3.domains.Domain` or str
:param str description: the project description. (optional)
:param boolean enabled: if the project is enabled. (optional)
:param parent: the project's parent in the hierarchy. (optional)
:type parent: :py:class:`keystoneclient.v3.projects.Project` or str
"""
# NOTE(rodrigods): the API must be backwards compatible, so if an
# application was passing a 'parent_id' before as kwargs, the call
# should not fail. If both 'parent' and 'parent_id' are provided,
# 'parent' will be preferred.
if parent:
kwargs['parent_id'] = base.getid(parent)
return super(ProjectManager, self).create(
domain_id=base.getid(domain),
name=name,
description=description,
enabled=enabled,
**kwargs)
@utils.positional(enforcement=utils.positional.WARN)
def list(self, domain=None, user=None, **kwargs):
"""List projects.
If domain or user are provided, then filter projects with
those attributes.
If ``**kwargs`` are provided, then filter projects with
attributes matching ``**kwargs``.
"""
base_url = '/users/%s' % base.getid(user) if user else None
return super(ProjectManager, self).list(
base_url=base_url,
domain_id=base.getid(domain),
fallback_to_auth=True,
**kwargs)
@utils.positional()
def get(self, project, subtree_as_list=False, parents_as_list=False):
"""Get a project.
:param project: project to be retrieved.
:type project: :py:class:`keystoneclient.v3.projects.Project` or str
:param boolean subtree_as_list: retrieve projects below this project
in the hierarchy as a flat list.
(optional)
:param boolean parents_as_list: retrieve projects above this project
in the hierarchy as a flat list.
(optional)
"""
# According to the API spec, the query params are key only
query = ''
if subtree_as_list:
query = '?subtree_as_list'
if parents_as_list:
query = query + '&parents_as_list' if query else '?parents_as_list'
dict_args = {'project_id': base.getid(project)}
url = self.build_url(dict_args_in_out=dict_args) + query
return self._get(url, self.key)
@utils.positional(enforcement=utils.positional.WARN)
def update(self, project, name=None, domain=None, description=None,
enabled=None, **kwargs):
return super(ProjectManager, self).update(
project_id=base.getid(project),
domain_id=base.getid(domain),
name=name,
description=description,
enabled=enabled,
**kwargs)
def delete(self, project):
return super(ProjectManager, self).delete(
project_id=base.getid(project))